Web Service Workers - Breaking The Web Because It Would Be A Sh...
summary
Explains concrete security impacts of service workers with live demos and bug findings rather than theory: claims that service workers read POST bodies, can disable CSP and persist after XSS, and that importScripts and blob/file URL hosting enable installs; shows request‑trafficking and range‑mixing attacks, reports several CVE‑style bugs (some already fixed), and uses Chrome devtools for reproducible tests. Worth watching if interest is in actionable vulnerabilities and exploit techniques; skip if only high‑level overview is wanted.
AI-written summary · about
chapters (4)
related talks
33mService Workers
43mAttacking Modern Web Technologies
30mThe Beauty of Service Workers
22mPWA as a new Cyber Attack Vector
01h 00mService Worker: Bringing Native App Experience to Web Apps
29mIntroduction to Web Security
25mDemystifying Web Workers and Service Workers
17mService Worker and the Appification of the Web